acp.praemienkontor.de

Issued by R3

About this certificate

This digital certificate with serial number 04:52:bf:90:48:dd:d4:cc:3f:f3:33:a8:45:c3:ac:75:55:83 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acp.praemienkontor.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:bf:90:48:dd:d4:cc:3f:f3:33:a8:45:c3:ac:75:55:83
Serial Number (int): 376606929530409261660912836563315000169859
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5b:66:d6:82:69:a3:3e:b6:03:d6:06:84:62:96:0b:bd:40:07:be:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): df:8b:67:94:fa:ac:e2:81:ec:86:d3:28:63:38:3c:5f:96:3e:a0:a8
Fingerprint (sha256): 21:2e:d9:f6:32:5b:4a:44:44:9d:93:cd:80:93:70:4e:5a:99:9a:24:17:9c:d0:04:39:1e:e2:aa:f4:77:40:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate acp.praemienkontor.de

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acp.praemienkontor.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acp.praemienkontor.de
aktion.eam.de
api.praemienkontor.de
gutschein.verivox.de
heimvorteil.netcologne.de
praemie.swn.net
praemien.enbw.com
praemienwelt.o2online.de
shop.praemienkontor.de
swg-praemien.stadtwerke-garbsen.de
treueplus.md.de
vorteil.enercity.de
vorteil.klarbusiness.de
vorteile.dew21.de
vorteile.gethandy.de
vorteile.otto.de
vorteile.skon.de
vorteile.stadtenergie.de

Other certificates including the domain name praemienkontor.de

(limited to 100 certificates)
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
orderstatus.stage.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
*.praemienkontor.de
acp.praemienkontor.de
praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
praemienkontor.de
praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de
acp.praemienkontor.de

Certificate

The complete raw certificate details for acp.praemienkontor.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyESyND85rswaJILQdMjM
rH8WAQxL3upOmEtcOWuxHcBr3YwmIZTNSJMBmXlxawK3/oVK2SFgngIusFKyrtHZ
5ubAawcnqepsY6qwWNtlzOoTPrn8ruSJr2y9koDhx9550vVJeB+nZ0cLSl2H8Wp3
VaF7ZuQKd0i+QzqnwmGgFKG8VlSFvJuFazjmIFKy1KfPXBcrUUNcsk/7xAfw3E3d
O45ah7630CzM2fvNzfx1B4MFb660t78p2o7nOhQEHYrAflhpz12QLCNy/Ws0YaXq
zo25F9ztxUUMuan4iPYPev7BSDfxnAG3fF1fqzNw7JxxLWuSpSgteyM2B8CUsiLu
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376606929530409261660912836563315000169859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-05 14:34:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-03 14:34:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acp.praemienkontor.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25281536307467647641651350493734550766517289742913149056866962932678497219592959921112175023231990590888632448773637572073600278499320368459344882556436017726147255140821127270047194786672593334349125501443750204865094231769982601360198705858158114861890853585277432172938694854107136441439559916985555117776867878316633469678499404745108837490687960889165197091636789384778042903168044570927123947400395421057112944889122503659407147849923838565455264258369119370112479254467053284367766817169623108191729152554032773935852094798199910771509376697187717482628357050331536245235708075091984631408433602353793387916977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b66d68269a33eb603d6068462960bbd4007bef9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (402 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acp.praemienkontor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktion.eam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.praemienkontor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gutschein.verivox.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heimvorteil.netcologne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praemie.swn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praemien.enbw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praemienwelt.o2online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.praemienkontor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swg-praemien.stadtwerke-garbsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treueplus.md.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorteil.enercity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorteil.klarbusiness.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorteile.dew21.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorteile.gethandy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorteile.otto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorteile.skon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorteile.stadtenergie.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017b16f3fa13000004030046304402205a16b26d1f80f3c43c07cdae80d99e979751bbeb49c8bf7d103a5cbaacd61e060220673c6d3c6105755b079f6d999ddbfb591329dc5d491460363fa60929c75954890076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017b16f3fa960000040300473045022100ee22b9fae5d8c2035303a4381577a8910ded1e1dfefb3d831fc317469a283f1b02202a898956aa1cd2df4bb47a6f91f26fd9633b6657f4ffe6e630ab37f232e5de6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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